Linux

52038 readers

1241 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
No misinformation
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago

MODERATORS

nooter692@lemmy.ml

AgreeableLandscape@lemmy.ml

MarcellusDrum@lemmy.ml

cypherpunks@lemmy.ml

cyclohexane@lemmy.ml

d3Xt3r@lemmy.nz

secureblue: Hardened Fedora Atomic and Fedora CoreOS images (secureblue.dev)

submitted 3 weeks ago* (last edited 3 weeks ago) by Charger8232@lemmy.ml to c/linux@lemmy.ml

7 comments fedilink hide all child comments

Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It's an operating system "for those whose first priority is using linux, and second priority is security."

secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS's hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.

secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.

If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.

I'd love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!

(In honor of Holiday. You know who you are.)

you are viewing a single comment's thread
view the rest of the comments

[–] jamesbunagna@discuss.online 4 points 3 weeks ago (1 children)

Not OP. But, FWIW, I've been daily driving secureblue for over a year now. And it has been wonderful experience.

Note that, by virtue of its superior security model, preconceived knowledge may not translate well. However, if you read its documentation and FAQ, then I'm pretty confident that you should be fine. Thankfully, if something's not clear or if you're facing issues, then you're in good hands through their Discord.

[–] Amaterasu@lemmy.world 2 points 5 days ago (2 children)

Any particular friction with GPUs? I see that they have a Nvidia image and they actually recommend if possible to stay away from Nvidia but does it work well with Nvidia or AMD GPUs?

Can we maybe tinker it to get some of the things that we have in Bazzite?

[–] jamesbunagna@discuss.online 2 points 2 days ago

I see that they have a Nvidia image and they actually recommend if possible to stay away from Nvidia but does it work well with Nvidia or AMD GPUs?

Just to be clear, the Nvidia images support Nvidia GPUs well and the non-Nvidia images support AMD (and Intel) GPUs well*.

[–] jamesbunagna@discuss.online 2 points 3 days ago (1 children)

Any particular friction with GPUs?

Not that I'm aware off. IIRC, both secureblue and Bazzite rely majorly on this for their hardware enablement. Hence, I don't think this should be significantly different between them.

I see that they have a Nvidia image and they actually recommend if possible to stay away from Nvidia but does it work well with Nvidia or AMD GPUs?

It should support both well, yes.

Can we maybe tinker it to get some of the things that we have in Bazzite?

You definitely can. Anything in particular that wish you to get over from Bazzite?

Random

Initially, I had read the question as "Can I tinker with it?". The answer written below tries to address that question.

I can't think of anything that you couldn't do inherently compared to what's possible on Bazzite. Heck, the way you engage in the act of tinkering should be almost identical. Note, however, that they do differ in how they accommodate building your own images. Bazzite prefers the template found on this page. On the other hand, secureblue relies on BlueBuild's, instead. Note that BlueBuild's template can also be used for Bazzite*.

[–] Amaterasu@lemmy.world 1 points 1 day ago

Anything in particular that wish you to get over from Bazzite?

Very minor things which may or may not be already available in Secureblue:

LatencyFleX, vkBasalt, MangoHud, and OBS VkCapture installed and available by default.

Patched Switcheroo-Control fixing default-broken iGPU/dGPU switching.

HDR available in game mode and full hardware accelerated codec support for H264 decoding.

And the last one that I'm on the fence if would be a good addition or not the ujust based on the just project.